What's this about?
Gemini 3.8 Flash Cyber is not generally available. It goes to "trusted defenders" through a new access programme Google is calling Fairwind. This is the third such structure announced in a week.
Why has every lab converged on gated cyber tiers?
Because the capability is genuinely dual-use and the alternatives are both bad. Ship it openly and you have handed exploit development to everyone. Refuse to build it and defenders get nothing while the capability arrives anyway from open weights. Gating is the compromise: train once, restrict access by vetting, keep the general model's guardrails tighter. The uncomfortable properties are the same in all three cases — someone maintains a list, the list is the security boundary, and the capability exists regardless of who is on it.
Why does this matter to you?
- Anthropic's Mythos, OpenAI's Daybreak Blue, Google's Fairwind — if you do defensive security work, there are now three application processes worth knowing about.
- The convergence in a single week suggests coordination, or at least that all three reached the same conclusion under the same pressure.
- It also means published benchmark numbers for these models describe a configuration most people cannot get.